This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F3639A71/311E502AAD5211EE82F093AE775412E6/DN4LfmeP_qnjrgV5_uGEd2EuT-k.mft
File:                     DN4LfmeP_qnjrgV5_uGEd2EuT-k.mft (raw, json)
Hash identifier:          h4I2OtuZb/dD8fFunnUSPpoAR7+MDFP+zZclJmMj/rU=
Subject key identifier:   19:47:7B:D5:C1:E7:72:73:57:04:2C:89:A8:FC:8E:27:67:18:1A:45
Authority key identifier: 0C:DE:0B:7E:67:8F:FE:A9:E3:AE:05:79:FE:E1:84:77:61:2E:4F:E9
Certificate issuer:       /CN=F3639A71AR/serialNumber=0CDE0B7E678FFEA9E3AE0579FEE18477612E4FE9
Certificate serial:       02DC
Authority info access:    rsync://rpki.afrinic.net/repository/arin/DN4LfmeP_qnjrgV5_uGEd2EuT-k.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F3639A71/311E502AAD5211EE82F093AE775412E6/DN4LfmeP_qnjrgV5_uGEd2EuT-k.mft
Manifest number:          02DB
Signing time:             Sat 20 Dec 2025 03:58:53 +0000
Manifest this update:     Sat 20 Dec 2025 03:58:53 +0000
Manifest next update:     Mon 22 Dec 2025 03:58:53 +0000
Files and hashes:         1: DN4LfmeP_qnjrgV5_uGEd2EuT-k.crl (hash: 5ubnfL8opvgp6qdKZegiC1Q766PCFQf/ydFDVb/ROIY=)
                          2: CE2F2690AD5311EE8E27B3B1775412E6.roa (hash: 8IJ5uu88BzDrvRLts60KNKjSTABo8XS/43EbjaMJPDo=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F3639A71/311E502AAD5211EE82F093AE775412E6/DN4LfmeP_qnjrgV5_uGEd2EuT-k.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F3639A71/311E502AAD5211EE82F093AE775412E6/DN4LfmeP_qnjrgV5_uGEd2EuT-k.mft
                          rsync://rpki.afrinic.net/repository/arin/DN4LfmeP_qnjrgV5_uGEd2EuT-k.cer
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Mon 22 Dec 2025 00:26:43 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 732 (0x2dc)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F3639A71AR, serialNumber=0CDE0B7E678FFEA9E3AE0579FEE18477612E4FE9
        Validity
            Not Before: Dec 20 03:58:53 2025 GMT
            Not After : Dec 22 03:58:53 2025 GMT
        Subject: CN=69461efd-95c7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:37:a6:9c:16:87:70:72:85:14:bd:df:cf:44:
                    70:46:30:12:46:36:50:cf:de:47:70:47:ce:29:1e:
                    df:4b:31:2a:8d:d8:8f:e7:40:7a:85:04:29:36:6c:
                    20:8e:db:86:3a:66:61:55:68:f2:97:c8:44:d0:43:
                    2f:83:05:6a:78:d6:24:ea:1e:96:5e:47:20:d3:af:
                    c8:33:b4:c3:18:de:f2:af:59:ac:04:b4:b3:e4:99:
                    42:a1:6c:03:32:23:28:97:eb:76:28:e8:39:db:84:
                    d3:e0:d6:e4:a0:34:ec:8c:c5:52:44:76:3b:92:46:
                    ac:19:d9:9d:4f:a7:e0:74:5f:c7:e9:d2:7f:2f:47:
                    31:08:2b:a9:fa:a0:c7:91:7b:00:1a:5d:ec:28:4d:
                    49:17:e5:9e:c3:d6:82:82:8c:bb:a9:de:69:0b:92:
                    0a:71:b6:5a:c1:f9:15:c4:c3:77:2f:c8:a7:ec:b3:
                    ad:03:bb:bc:ce:ac:28:66:d1:39:fa:25:ef:0e:46:
                    a1:f4:96:d6:b4:ba:7b:dc:37:3e:58:06:55:26:fa:
                    97:9c:e9:8d:16:a5:97:45:74:0d:94:45:e2:b2:64:
                    a1:5f:c4:b6:ff:4b:82:20:1d:f6:2a:80:19:40:2e:
                    a0:d4:4f:34:37:78:89:ce:ed:95:a5:da:cf:7f:05:
                    f9:b9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                19:47:7B:D5:C1:E7:72:73:57:04:2C:89:A8:FC:8E:27:67:18:1A:45
            X509v3 Authority Key Identifier:
                keyid:0C:DE:0B:7E:67:8F:FE:A9:E3:AE:05:79:FE:E1:84:77:61:2E:4F:E9

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F3639A71/311E502AAD5211EE82F093AE775412E6/DN4LfmeP_qnjrgV5_uGEd2EuT-k.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/DN4LfmeP_qnjrgV5_uGEd2EuT-k.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3639A71/311E502AAD5211EE82F093AE775412E6/DN4LfmeP_qnjrgV5_uGEd2EuT-k.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         86:d8:d0:16:42:75:c1:54:41:43:d6:92:f7:0b:53:27:0c:c7:
         5c:44:18:32:c3:4b:8f:f7:bc:4d:08:69:b0:fc:98:e3:c2:ea:
         66:35:a8:49:74:8d:e5:70:75:9f:dc:8c:91:01:0e:91:13:b0:
         25:56:69:c7:ed:d0:84:b0:10:9c:79:9c:d1:a1:1e:70:16:5a:
         1e:cc:c8:24:07:de:39:7c:3a:9d:4e:f7:14:68:6d:04:59:30:
         ad:cc:cd:eb:71:ef:8c:4c:f8:e9:a3:e3:b3:85:ec:ad:7d:14:
         20:67:9b:25:5e:19:22:54:75:f5:10:9f:bc:f6:f1:eb:3a:7c:
         c3:36:1a:57:50:83:bd:9a:10:6b:dd:f4:69:dc:9c:9c:a7:bd:
         74:5c:fe:8b:41:a3:7d:d4:63:1d:ca:91:e2:8e:1b:21:ed:ac:
         34:3a:d7:5e:74:a7:2d:b2:48:38:3d:73:1a:d9:00:8d:b6:f7:
         7d:b7:1f:2d:77:15:8f:37:32:79:9b:8d:64:ff:ae:78:2b:5a:
         8b:12:71:96:c5:74:ba:5f:4b:ba:33:f7:b9:ec:8c:b7:b5:59:
         fa:6d:82:7a:98:fd:88:27:30:a6:35:1a:5e:6e:d4:59:d4:48:
         81:a2:46:49:a9:bd:44:9f:f8:7f:42:75:22:56:55:26:78:54:
         7c:40:fe:e4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 20 12:15:37 2025 by rpki-client